Is Logstash 7.3.0 affected?

CVSS 7.5

2 known vulnerabilities affect 7.3.0 (highest CVSS 7.5).

Your branch 7 has reached end of life (Jan 15, 2026).

72 newer releases in its track, up to 7.17.29. What changed up to 7.17.29

A newer release line is out: 9.5.6.

Vulnerabilities affecting 7.3.0

7.5
CVE-2019-7620 Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin. An unauthenticated user who is able to connect to the port the Logstash beats input cou… fixed in 7.4.1
3.7
CVE-2021-22138 In Logstash versions after 6.4.0 and before 6.8.15 and 7.12.0 a TLS certificate validation flaw was found in the monitoring feature. When specifying a trusted server CA certificate Logstash would n… fixed in 7.12.0